Application. No.: 10/566,206 
Amendment dated August 13, 2008 
Reply to Office Action of May 13, 2008 

Listing of Claims: 

This listing of claims will replace all prior versions, and listings, of claims in the application: 

Claim 1 : (Currently Amended) A method of authentication for Media Gateway, 
characterized in that the method comprises: 

providing each of a Media Gateway and a Media Gateway Controller with an initial key 
to validate digital signatures; 

eaeh-ef- said Media Gateway and said Media Gateway Controller performing a 
registration between the Med ia Gateway and the Media Gatewa y Controller and generating a 
shared key having a specific lifetime during the registration of said Media Gateway with said 
Media Gateway Controller by validating signaling messages used in the registration using the 
initial key, wherein the signaling messages include a parameter for generating th e shared key and 
an initial digital signature generated by the initial keyw hea-^ai4-M«4k-Gateway-^g4»t-eFfrwkh 
said Media Gateway Controller using said initial key ; 

for each call, said Media Gateway Controller and said Media Gateway authenticating a 
call message and a response message, each including a digital signature e ae - h-m e ssa i g ie- b e tw ee r t 
ih^ - M^d i a^a&way^efH^^ by using the shared key; and 

said Media Gateway and said Media Gateway Controller updating said shared key when 
the lifetime of said shared key is expired. 

Claim 2: (Currently Amended) The method according to claim 1, characterized in that the 
step of eaeh-ef- -said Media Gateway and said Media Gateway Controller performing the 
registration and generating the shared key comprises: 

the Media Gateway sending a register signaling message to said Media Gateway 
Controller, wherein said register signaling message includes a parameter for said Media Gateway 
Controller to generate the shared key and an initial digital signature generated by the Media 
Gateway using said initial key; 

said Media Gateway Controller validating the initial digital signature generated by the 
Media Gateway using the initial key; 
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said Media Gateway Controller generating the shared key based on the parameter in said 
register signaling message and setting a lifetime of said shared key when the initial digital 
signature generated by said Media Gateway is validated; 

said Media Gateway Controller sending a modification command to said Media Gateway, 
wherein said modification command includes a parameter for said Media Gateway to generate 
the shared key, a digital signature generated by said Media Gateway Controller using said initial 
key, and the lifetime of said shared key; 

said Media Gateway validating the digital signature generated by said Media Gateway 
Controller by using said initial key; and 

said Media Gateway generating the shared key based on the parameter in said 
modification command and setting the lifetime, when the digital signature generated by said 
Media Gateway Controller is validated. 

Claim 3 : (Currently Amended) The method according to claim 1 , characterized in that the 
step of said Media Gateway Controller and said Media Gateway authenticating e a - eh - m -e ssag ethe 
call message and the response message for each call comprises: 

fer-eaeh-eaHy-said Media Gateway Controller attaching a- the digital signature - generated 
b y th e M edia Gateway Controller using said shared key to a-the call message , wherein the di g ital 
signature is generated by the Media Gateway Controller and wherein the call message is 
transmitted to said Media Gateway; 

said Media Gateway validating said digital signature attached to said call message by 
using said shared key and returning a response message attached with a digital signature 
generated by the Media Gateway using said shared key to said Media Gateway Controller when 
said digital signature in said call message is validated; and 

said Media Gateway Controller validating said digital signature attached to said response 
message by using said shared key and establishing a call connection when said digital signature 
attached to said response message is valid, otherwise denying the call. 

Claim 4: (Previously Presented) The method according to claim 1, characterized in that the 
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step of said Media Gateway and said Media Gateway Controller updating said shared key 
comprises: 

sending a notification command by said Media Gateway to said Media Gateway 
Controller to request said Media Gateway Controller to generate a new shared key, wherein said 
notification command includes a parameter for said Media Gateway Controller to generate the 
new shared key and a digital signature generated by said Media Gateway using the initial key; 

said Media Gateway Controller validating the digital signature generated by said Media 
Gateway using said initial key; 

said Media Gateway Controller generating the new shared key based on the parameter in 
said notification command and setting a lifetime of said new shared key, when the digital 
signature generated by said Media Gateway is validated; 

said Media Gateway Controller sending a modification command to said Media Gateway, 
wherein said modification command includes a parameter for said Media Gateway to generate 
the new shared key, a digital signature generated by said Media Gateway Controller using said 
initial key and the lifetime of the new shared key; 

said Media Gateway validating the digital signature generated by said Media Gateway 
Controller by using said initial key; and 

said Media Gateway generating the new shared key based on the parameter in said 
modification command and setting the lifetime, when the digital signature generated by said 
Media Gateway Controller is validated. 

Claim 5: (Original) The method according to claim 2, 3 or 4, characterized in that the 
algorithm used to generate a shared key by said Media Gateway Controller and said Media 
Gateway is different from the algorithm used to generate a digital signature by said Media 
Gateway Controller and said Media Gateway. 

Claim 6: (Currently Amended) The method according to claim 2, 3 or 4, characterized in 
that a field/ or a p acket of an expanded protocol is used to transmit said parameter for generating 
a shared key and said digital signature. 
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Claim 7: (Previously Presented) The method according to claim 1, characterized in that the 
lifetime of said shared key is time, or the number of times that said shared key can be used for 
authentication. 
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